This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/287a7556-51fb-4f35-824e-e5b5a4b8f688.roa File: 287a7556-51fb-4f35-824e-e5b5a4b8f688.roa (raw, json) Hash identifier: R0iGV8CDL6a7q+FwyMgOOoXmKNnIO9rAr3yzoh+QWS8= Subject key identifier: 44:D1:6B:F1:95:4B:3C:97:BD:52:37:63:F9:16:85:D0:7A:C1:08:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B97D3ACBCFF1748CD36DE1B05F3710D71504A79 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/287a7556-51fb-4f35-824e-e5b5a4b8f688.roa Signing time: Sat 22 Nov 2025 01:10:09 +0000 ROA not before: Sat 22 Nov 2025 01:10:09 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:97:d3:ac:bc:ff:17:48:cd:36:de:1b:05:f3:71:0d:71:50:4a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 22 01:10:09 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=08b3c6ce5c82a117b2c24fe8e9d4b2334880bdb49dfa8378fc4b8495de7f922e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:bf:e3:cc:73:c6:46:23:ff:05:24:ae:bd: ce:fb:61:5b:1b:3b:4c:50:f4:87:95:3e:78:62:d8: 2e:1f:6b:33:86:ac:07:b8:cf:8a:a0:5b:ab:9d:24: 07:88:6f:1d:cb:77:a5:85:90:ac:af:aa:e7:88:26: d5:48:e4:c2:46:85:81:5f:96:b8:98:e9:16:f7:20: 8e:fb:a2:1c:34:4a:94:8c:1a:52:61:56:95:79:ec: 12:be:86:8d:f1:a6:05:27:16:f9:4f:74:d3:1d:43: d0:38:4f:5f:0f:c9:df:e3:31:b7:b0:c3:c4:cf:9b: 67:cd:0a:c4:5d:90:15:42:0d:2f:d2:1c:81:ad:04: 19:80:8e:34:24:ad:70:a6:dd:bb:64:c7:c5:33:1f: dd:4e:8e:f4:47:cf:43:29:cf:63:0d:5e:00:05:cc: 00:91:50:f8:31:46:b1:e4:3d:fe:57:b9:d5:df:af: 3d:8b:82:5e:03:19:ad:8a:ca:7b:ed:8c:74:0c:70: 7b:69:65:15:f6:f3:90:ed:39:82:b1:8b:71:42:c0: 98:da:c9:0f:08:12:a4:70:c8:91:cd:b3:7a:61:78: c9:f0:4c:dc:0d:59:97:8d:bc:7d:ae:37:76:f8:f3: 0b:de:1c:c2:81:ad:9c:ed:d6:d5:49:bb:4f:3c:97: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:6B:F1:95:4B:3C:97:BD:52:37:63:F9:16:85:D0:7A:C1:08:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/287a7556-51fb-4f35-824e-e5b5a4b8f688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.220.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:8c:4d:88:25:c2:a8:15:7e:8c:b9:56:c1:2a:2d:11:8c:d3: b4:77:36:03:e5:88:ce:f5:bc:94:1a:1d:f7:26:ff:75:0b:05: 23:b6:76:57:4d:1b:ec:8f:8f:70:fa:4b:f2:49:02:f9:40:25: e6:e7:c8:46:31:af:66:ab:70:10:41:de:09:21:b7:12:e5:59: be:dd:8e:4d:07:4b:9a:2a:46:f5:ad:f8:1b:c7:06:b8:19:9b: 23:a2:5d:ff:01:c7:57:18:bc:df:f2:65:11:42:cf:a3:53:8b: 92:f8:7b:36:d0:18:85:8d:c5:d8:a9:be:27:5b:48:7a:c2:ec: 0c:c9:95:ed:77:17:f0:e5:25:24:19:5b:c1:92:56:e1:f2:f0: 8c:56:d7:0b:19:83:fd:72:c1:2a:22:04:dd:79:aa:3d:45:85: ea:00:b6:b6:aa:c7:cc:16:7f:bf:30:b1:f9:33:6d:c7:53:b4: 64:32:f3:8f:16:58:09:5e:cc:6f:a2:50:06:4c:f8:0e:92:77: 80:a1:62:35:c9:e8:05:0d:cf:cd:81:d8:f3:41:8e:59:20:1b: 25:98:28:5a:d0:b7:f0:91:31:90:c6:b6:2b:db:3d:a6:38:ae: 83:02:ec:6f:d5:7b:be:d0:60:7f:df:2f:62:6e:b4:a4:78:46: bb:49:08:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC5fTrLz/F0jNNt4bBfNxDXFQSnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTIyMDExMDA5WhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGIzYzZjZTVjODJhMTE3YjJjMjRmZThlOWQ0YjIzMzQ4 ODBiZGI0OWRmYTgzNzhmYzRiODQ5NWRlN2Y5MjJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+cL/jzHPGRiP/BSSuvc77YVsbO0xQ9IeVPnhi2C4fazOG rAe4z4qgW6udJAeIbx3Ld6WFkKyvqueIJtVI5MJGhYFflriY6Rb3II77ohw0SpSM GlJhVpV57BK+ho3xpgUnFvlPdNMdQ9A4T18Pyd/jMbeww8TPm2fNCsRdkBVCDS/S HIGtBBmAjjQkrXCm3btkx8UzH91OjvRHz0Mpz2MNXgAFzACRUPgxRrHkPf5XudXf rz2Lgl4DGa2KynvtjHQMcHtpZRX285DtOYKxi3FCwJjayQ8IEqRwyJHNs3pheMnw TNwNWZeNvH2uN3b48wveHMKBrZzt1tVJu088l6r3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURNFr8ZVLPJe9Ujdj+RaF0HrBCDEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4N2E3NTU2LTUxZmItNGYzNS04MjRlLWU1YjVhNGI4ZjY4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq9wwDQYJKoZIhvcNAQELBQADggEBAE6MTYglwqgVfoy5VsEqLRGM07R3 NgPliM71vJQaHfcm/3ULBSO2dldNG+yPj3D6S/JJAvlAJebnyEYxr2arcBBB3gkh txLlWb7djk0HS5oqRvWt+BvHBrgZmyOiXf8Bx1cYvN/yZRFCz6NTi5L4ezbQGIWN xdipvidbSHrC7AzJle13F/DlJSQZW8GSVuHy8IxW1wsZg/1ywSoiBN15qj1FheoA traqx8wWf78wsfkzbcdTtGQy848WWAlezG+iUAZM+A6Sd4ChYjXJ6AUNz82B2PNB jlkgGyWYKFrQt/CRMZDGtivbPaY4roMC7G/Ve77QYH/fL2JutKR4RrtJCHo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:28 2025 by rpki-client